Legal
Last updated: May 6, 2026
Cookies are small text files a website asks your browser to store. They let us keep you signed in, remember things you typed, and (with your permission) measure how the site is performing. This page explains every cookie we use, why we use it, and how long it sticks around.
We group cookies into three categories. You can accept all, reject the non-essential ones, or pick category by category in our cookie banner. You can revisit your choice anytime through the “Cookie preferences” link in the footer.
| Name | Category | Purpose | Duration | Provider |
|---|---|---|---|---|
__Secure-next-auth.session-token (HTTPS) / next-auth.session-token (dev) | Essential | Keeps you signed in across pages so you don’t have to log in for every action. | 30 days, refreshed on activity | DTCR (first-party) |
__Host-next-auth.csrf-token (HTTPS) / next-auth.csrf-token (dev) | Essential | Protects sign-in forms against cross-site request forgery attacks. | Session | DTCR (first-party) |
__Secure-next-auth.callback-url (HTTPS) / next-auth.callback-url (dev) | Essential | Remembers the page you were trying to reach so we can take you there after sign-in. | Session | DTCR (first-party) |
next-auth.pkce.code_verifier | Essential | Used briefly during a Google sign-in handshake to prevent OAuth code interception. Cleared as soon as the handshake completes. | 15 minutes | DTCR (first-party) |
dtcr_quiz_answers | Essential | Remembers your matching-quiz answers between pages so you can pick up where you left off without an account. | 30 days | DTCR (first-party) |
dtcr_cookie_consent | Essential | Records your cookie preferences so we don’t prompt you again. | 180 days | DTCR (first-party) |
dtcr_signup_intent | Essential | Set briefly when you click "Continue with Google" on the sign-up page so our server knows you agreed to the Terms before creating your account. Cleared automatically a few minutes later. | 5 minutes | DTCR (first-party) |
_ga | Analytics | Distinguishes unique visitors for Google Analytics 4. | 2 years | |
_ga_<container-id> | Analytics | Persists session state for Google Analytics 4 (the suffix is your container ID). | 2 years |
We use Google Analytics 4 with Google Consent Mode v2. Until you accept analytics in our cookie banner, the GA tag is loaded but cookies are not set; only minimal anonymized pings are sent so Google can model traffic without identifying you. After you accept, GA4 sets the cookies listed above and reports on visit counts, page paths, traffic source, and approximate location at the country/region level. We have IP anonymization enabled, so the precise IP address is never stored. Google’s own privacy practices are documented at policies.google.com/privacy.
In addition to our cookie banner, your browser lets you block or delete cookies directly. Doing so for essential cookies will sign you out and reset your quiz progress. Most browsers also offer a “Do Not Track” or “Global Privacy Control” signal; we honor Global Privacy Control as an opt-out for analytics and advertising on the same level as a manual rejection in our banner.
When we add a new cookie or change the purpose or duration of an existing one, we update this page and bump the “Last updated” date. If a change is material we will also re-prompt you with the cookie banner so you can review your preferences.
For questions about cookies or to exercise your privacy rights, email privacy@dentaltourismcr.com. See the full Privacy Policy for our complete data practices.